PHP Vulnerability Response and mitigation

Incident Report for Podio Status Page

Monitoring

We are aware of the vulnerability recently announced by PHP and are actively working to mitigate the associated risk. At this time, there is no indication of any breach or compromise.

As part of our mitigation efforts, we have temporarily disabled all PWA multipart requests, affecting:

1. Flow imports (ZIP/XML files)
2. All webhook requests that submit data using the multipart/form-data content type

These measures are precautionary and will remain in place until the risk has been fully addressed.

We will continue to monitor the situation closely and will provide further updates as soon as relevant information becomes available.

Thank you for your patience and understanding.

Posted Oct 21, 2026 - 10:32 EDT

This incident affects: Advanced Workflow Automation and Advanced Workflow Automation Failover Queue.